6efccf47f84e801a2208770407d10e75bf2d20ed23e3b3f96387290c27b20f84

General

Target
6efccf47f84e801a2208770407d10e75bf2d20ed23e3b3f96387290c27b20f84
Size 4.7MB
Sample231219-3vj97scfc7
SHA256 6efccf47f84e801a2208770407d10e75bf2d20ed23e3b3f96387290c27b20f84
MD5 55e064722e928547d80fee36e8307f48
SHA1 a2ebab5b4a63f871d48bc10410c64a0f6e4acd88
SHA512 5543ee9ccfa96fe70f6b7f9370fe28df90a3a203785cc743cc72bc7825119e9c5af0aa3f204ac381f83d5c0ce1da6b035e4ce14a57ad2d6082ef727c6ad01973
SSDEEP 98304:DRFKMjBlKLIa+PWtp+0k2TY2hTUYxSH/2yv5aiUr4Dm9LwkbZh:jjLJPeA72T9+0G/2yc34Dme4h
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS

File Explorer

6efccf47f84e801a2208770407d10e75bf2d20ed23e3b3f96387290c27b20f84

.apk 4.7MB

6efccf47f84e801a2208770407d10e75bf2d20ed23e3b3f96387290c27b20f84

SHA256 6efccf47f84e801a2208770407d10e75bf2d20ed23e3b3f96387290c27b20f84
MD5 55e064722e928547d80fee36e8307f48
SHA1 a2ebab5b4a63f871d48bc10410c64a0f6e4acd88
SHA512 5543ee9ccfa96fe70f6b7f9370fe28df90a3a203785cc743cc72bc7825119e9c5af0aa3f204ac381f83d5c0ce1da6b035e4ce14a57ad2d6082ef727c6ad01973
SSDEEP 98304:DRFKMjBlKLIa+PWtp+0k2TY2hTUYxSH/2yv5aiUr4Dm9LwkbZh:jjLJPeA72T9+0G/2yc34Dme4h
MD5 SHA1 SHA512 SSDEEP

android

com.qiyi.video

Android Permissions

6efccf47f84e801a2208770407d10e75bf2d20ed23e3b3f96387290c27b20f84

Permissions

android.permission.CALL_PHONE

android.permission.SEND_SMS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SMS

android.permission.RECEIVE_SMS

android.permission.VIBRATE

android.permission.READ_CONTACTS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.READ_SMS

android.permission.QUERY_ALL_PACKAGES

android.permission.WAKE_LOCK

android.permission.REQUEST_DELETE_PACKAGES

6efccf47f84e801a2208770407d10e75bf2d20ed23e3b3f96387290c27b20f84

com.qiyi.video.p0cb0aae8

com.qiyi.video.p407b2628

com.qiyi.video.pd0a77d7f

com.qiyi.video.peffc8420

com.qiyi.video.p7fe53cb4

com.qiyi.video.pff03a26d

com.qiyi.video.pc2630c03

com.qiyi.video.p0b42ebee

com.qiyi.video.p5e7bd65e

com.qiyi.video.pcdefb005

com.qiyi.video.p49060a87

com.qiyi.video.p5e3a14da

Sharing

General

Malware Config

Signatures

File Explorer

6efccf47f84e801a2208770407d10e75bf2d20ed23e3b3f96387290c27b20f84

com.qiyi.video.p0cb0aae8

com.qiyi.video.p407b2628

com.qiyi.video.pd0a77d7f

com.qiyi.video.peffc8420

com.qiyi.video.p7fe53cb4

com.qiyi.video.pff03a26d

com.qiyi.video.pc2630c03

com.qiyi.video.p0b42ebee

com.qiyi.video.p5e7bd65e

com.qiyi.video.pcdefb005

com.qiyi.video.p49060a87

com.qiyi.video.p5e3a14da

Android Permissions

6efccf47f84e801a2208770407d10e75bf2d20ed23e3b3f96387290c27b20f84